It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

The IP attempted to perform a phishing attack using the SASL server.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP was traced back to several attempts to access domain admin credentials.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

This IP belongs to Goldman Sachs Group.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

This IP belongs to AT&T.

This IP belongs to Ford Motor.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

It attempted to use the FTP server to distribute virus creation tools.

This IP belongs to Charter Communications.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

Several instances of aggressive advertising spyware have been linked to this IP.

It made various efforts to insert spyware to monitor SSH communications covertly.

The IP attempted to perform a password spraying attack on the SASL server.

This IP belongs to Verizon Communications.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.